Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a653030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a653030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          PZPLjJDK8XSiQyKnSh0rZWTPFLa37pv7sosrh87S5eg=
Subject key identifier:   69:B8:C9:90:B5:67:CE:49:4F:D0:EF:61:CD:E6:E1:F2:B7:29:E3:C2
Certificate issuer:       /CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
Certificate serial:       632271C044CDED44F9CDD17CE47BFE458EB8E9F7
Authority key identifier: DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a653030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Sun 31 Dec 2023 15:46:00 +0000
ROA not before:           Sun 31 Dec 2023 15:41:00 +0000
ROA not after:            Sun 29 Dec 2024 15:46:00 +0000
asID:                     265175
IP address blocks:        2804:2bc8:e000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:22:71:c0:44:cd:ed:44:f9:cd:d1:7c:e4:7b:fe:45:8e:b8:e9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEDBC176DF82B97C20C329DCFF1D18692EC55207
        Validity
            Not Before: Dec 31 15:41:00 2023 GMT
            Not After : Dec 29 15:46:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:ac:cc:d0:3d:3c:58:fe:a3:1e:f0:b8:0e:
                    79:6c:dc:5a:33:c0:00:ab:54:3f:bb:cd:d1:4f:a7:
                    14:95:db:c3:49:2b:54:b7:d7:a3:43:cd:04:fa:2b:
                    57:27:8d:02:a8:2e:0f:dd:1c:68:b7:94:44:11:d9:
                    be:51:87:b9:a4:46:8d:ec:8d:d7:9e:e1:e6:a8:00:
                    4e:33:12:36:2c:29:71:5b:36:f1:78:e8:bb:af:f1:
                    41:12:66:cd:f7:2b:00:34:4c:73:e8:24:6d:f4:a1:
                    7a:d2:a5:2e:21:45:b2:97:c3:d1:19:2c:7f:59:a7:
                    1d:8d:9d:ef:cc:a8:9c:a6:65:e1:87:b0:ff:bd:da:
                    f4:b6:11:68:49:cc:97:58:05:d9:23:3d:e5:8c:cb:
                    ac:62:7e:cd:07:5c:ef:bf:4e:99:a0:66:ef:1c:82:
                    1b:32:86:e0:09:78:47:eb:10:13:44:c0:1b:5b:fe:
                    6a:b5:20:a4:fb:c5:b0:61:68:38:c1:39:27:a5:82:
                    a6:1f:ff:57:49:06:62:17:73:16:3a:f1:68:f7:43:
                    36:be:39:af:b4:f9:cf:d1:95:ab:b5:e8:aa:05:51:
                    6b:47:db:18:78:de:9f:a4:45:64:3e:10:7c:6e:36:
                    89:c5:9c:56:bb:84:b4:27:64:df:94:00:27:cb:1d:
                    4c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B8:C9:90:B5:67:CE:49:4F:D0:EF:61:CD:E6:E1:F2:B7:29:E3:C2
            X509v3 Authority Key Identifier:
                keyid:DE:DB:C1:76:DF:82:B9:7C:20:C3:29:DC:FF:1D:18:69:2E:C5:52:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DEDBC176DF82B97C20C329DCFF1D18692EC55207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/0/323830343a326263383a653030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         43:8b:c2:01:3e:c9:ea:e6:6d:2d:a6:77:37:5c:0b:51:c5:19:
         54:fa:e0:7b:25:f4:41:61:1e:9f:5d:f2:93:20:db:3e:5f:ed:
         cd:10:af:4f:fa:88:51:1e:ba:5e:6f:c9:b5:56:f7:90:da:21:
         04:af:37:ce:80:5d:7a:57:45:12:8e:ef:29:5c:f9:2d:93:e9:
         30:77:de:76:07:f4:93:b5:67:d8:f1:e1:fc:c5:6d:1f:41:a9:
         cb:f6:fe:b4:6c:b0:f5:72:96:4b:3a:5d:a3:6f:91:b0:96:48:
         34:ca:61:90:70:43:9f:d8:1f:7f:83:d5:f8:e1:80:dd:82:11:
         1e:6e:29:37:9b:fe:73:7d:e3:d5:be:3a:bb:8f:d1:be:6e:6b:
         5f:a2:62:50:48:da:0d:ba:b4:5f:1d:e0:b2:fe:67:8b:47:a9:
         be:aa:fc:61:8c:c6:c8:19:77:90:49:30:47:a0:44:3b:25:0f:
         c9:c3:80:74:10:30:dd:d1:d5:3d:95:e3:e8:a9:a8:c1:0f:b8:
         5d:d5:d9:6f:b0:86:d7:88:93:97:ba:ae:af:f2:d8:97:11:f5:
         b8:f0:ea:28:04:13:19:a2:89:8e:da:2d:3b:e5:53:5b:2a:77:
         82:fc:71:07:8c:e3:37:a9:5b:65:ed:62:c1:21:ee:52:e3:63:
         75:db:b8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org